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(57) Abstract 

The elevator safety device creates 
a raise pit beneath the elevator frame us- 
ing left and right laterally-spaced, fixed 
stop members fixedly attached to the car 
frame, and left and right laterally-spaced 
safety columns affixed to the pit floor 
and pivotable between an extended po- 
sition in vertical alignment with the left 
and right stop members, respectively, 
and a retracted position clear of the 
car, the frame, and the left and right 
stop members. The safety columns are 
bumper-type devices designed to sup- 
port full car weight should the need 
arise, and provide the ASME A17.I 
minimum depth of pit for the refuge 
area. Actuators are operanvdy con- 
nected to the safety columns to pivot 
them between their extended and re- 
tracted positions. A pressure-sensitive 
detector located on the pit floor below 
the car detects the presence of a per- 
son on the pit floor. The actuators 
are electronically activated to pivot the 
safety columns from their retracted to 
their extended positions. Left and right 
laterally-spaced, movable stop members 
are attached to the rails which guide ver- 
tical movement of the car, and are movable between a first position in vertical alignment with the car frame and a second position clear of 
the frame, to prevent downward vertical movement of the car below the stop members. The elevator safety system also includes an electric 
alarm bell, key-activated switches, and electro-mechanical relays. An ancillary AC power source of 120 volts operates the elevator safety 
system. 
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ELEVATOR SAFETY SYSTEM INCORPORATING FALSE PIT 

5 BACKGROUND OF THE INVENTI ON 

l. Field of the invention 

The present invention relates to elevator safety systems. More specifically, the 
invention relates to an elevator safety system incorporating a false pit for use where 
10 circumstances prevent the construction of a standard safety pit. 



2. Related Art 

The safety code for elevators and escalators (ASME A17.1) requires a "minimum 
15 bottom car clearance" above an area with a physically restricted pit depth. Pit depth can be 

limited by a variety of conditions, including but not limited to pre-existing construction, a 

building structure, a geological formation such as bedrock, or a locally high water table. 

Attempting to install a minimum pit depth under these conditions often results in financial 

burdens which cause the delay or cancellation of installation. Financial burden can result 
20 from the need to use explosives to eliminate a large boulder or bedrock. However, in the 

case of a high water table, there is no solution readily available, except to relocate or 

redesign the building structure. 

Another factor to be considered is the need to meet minimum standards of 

accessibility for the handicapped or physically impaired. An elevator often will provide the 
25 needed accessibility. However, in a pre-existing facility, there may be obstacles to 

placement of an elevator. One such obstacle is the minimum pit depth to allow for the 

minimum bottom car clearance. 

Among the relevant portions of ASME AI7.1 are Rule 106.1(g) of Section 106 and 

Rules 107.1 and 107.1(d) of Section 107. In summary, these rules require that a cardboard 
30 box measuring either 24 inches wide x 48 inches long x 24 inches high or 18 inches wide x 

36 inches long x 42 inches high must fit beneath the car platform frame without contact 

when the car is at its lowest possible elevation in the hoistway. The full refuge area must 
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be available even if the normal method of suspending the car is absent due to mechanical 
failure r periodic maintenance, or for scheduled replacement as is done with hoisting ropes. 

In a conventional elevator system, rubber bumpers or spring buffers mechanically 
limit the car's lowest elevation in the hoistway. The height of the refuge area must meet 
5 the code specifications when the car is resting on the bumpers or the fully compressed 
spring buffers. The car frame size measured horizontally left to right and front to rear has 
a direct bearing on which refuge area is available. A minimal car platform size would 
mandate a 42 inch high refuge area, while a larger car platform would allow for a 24 inch 
high refuge area. 

10 The concept of manual catches which rotate into the elevator shaft to prevent the 

elevator car from descending is well-known, as is the concept of supporting the elevator car 
on an arm. For example, U.S. patent No. 2,053,954 to Lindahl discloses an arrangement 
in mining elevators in which an arm rotates out into an elevator shaft to hold the car at a 
specific location. The arm is able to rotate after the elevator has slowed to a predetermined 

15 speed and a worker has manually actuated a lever. U.S. patent No. 787,258 Austin 
discloses a protrusion which supports an elevator in the event that the elevator rises above 
the protrusion and breaks the supporting cable. U.S. patent No. 692,888 Moses discloses 
support arms embedded in the shaft wall which rotate out to support the elevator when it is 
located at the top of the shaft. U.S. patent No. 642,448 Holmes discloses a safety device 

20 for elevators in which many levers are embedded in the shaft wall, and can rotate out to 
engage the edge of the elevator car in an emergency situation. U.S. patent No. 406,630 
Cowie discloses a safety catch for use in the event of overwinding the elevator cable. The 
safety catch includes a guide with a shoulder which catches the elevator if the base of the 
car has risen past the top of the shoulder. 

25 However, the primary concern of the above-described patents is either to catch the 

elevator at the top of the shaft in case of overwinding of the elevator cable, or to hold the 
car steady at a particular stop. None of them is directed to providing an area of safety at 
the terminus of the shaft, or teaches or suggests the means to do so. 

The ASME A 17.1 safety code for elevators and escalators is constantly evolving to 

30 keep pace with new technologies, processes and re-examination of the standards with which 
elevator and escalator installations must comply. Thus, the ASME A17 Code specifically 
states: "Where present rules are not applicable or do not describe the product or system. 
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the enforcing authority should recognize the need for exercising latitude and granting 
exceptions where the product or system is equivalent in quality, strength or stability, fire 
resistance, effectiveness, durability, and safety to that intended by the present Code Rules. " 
The present invention takes advantage of this provision to provide an elevator safety system 
5 under circumstances where a conventional four (4) foot minimum pit depth cannot be 
achieved due to pre-existing conditions. 



SUMMARY QF THE INVENTION 
10 The elevator safety device in accordance with the present invention 

electro-mechanically creates a false pit beneath the elevator frame. The false pit created 
includes a bumper-type device designed to support full car weight should the need arise, 
and provides the ASME A17. 1 minimum depth of pit for the refuge area. The elevator 
safety device in accordance with the present invention accomplishes this task automatically 
15 if the car is above the pit floor high enough to allow the positioning of motor driven 
actuators coupled directly to columns that support the elevator. Two manually operated 
devices are provided for the safety of the individuals who maintain and repair the elevator 
installation. These manually operated devices are on the elevator guide rails or other 
suitable structure at a higher elevation to allow a person to stand upright. 
20 The elevator safety system in accordance with the present invention additionally 

includes an electric alarm bell, a pressure-operated mat switch, key-operated switches, and 
electro-mechanical relays. An ancillary AC power source of 120 volts operates the 
elevator safety system. The elevator operating voltage, provided by commercial power and 
the ancillary AC power source must be continuously available for the elevator to operate. 

25 

RRIFF DESCRIPTION OF THE DRAWINGS 
The invention is better understood by reading the following Detailed Description of 
the Preferred Embodiments with reference to the accompanying drawing figures, in which 
30 like reference numerals refer to like elements throughout, and in which: 

Figure 1 is a perspective view of a conventional elevator incorporating an elevator 
safety system in accordance with the present invention, with the safety columns and their 
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actuators in their extended, operative positions to create a false safety pit below the elevator 
car floor. 

Figure 2 is a perspective view of the conventional elevator and the elevator safety 
system of Figure 1, with the safety columns and their actuators in their extended, operative 
5 positions and with the movable stop members in their inoperative positions, and the 
elevator in its lowermost limit position atop the safety columns. 

Figure 3 is a perspective view of the conventional elevator and the elevator safety 
system of Figure 1 , with the components of the elevator safety system in their inoperative 
positions and the elevator in its normal operating position with the lowest floor landing. 
10 Figure 4 is an elevational view of a safety column, its actuator and its limit switches 

in accordance with the present invention. 

Figure 5 is an elevational view of the conventional elevator and the elevator safety 
system of Figure 1, with the safety columns and their actuators in their extended, operative 
positions and the limit switches in their positions as determined by the operative position of 
15 the safety columns. 

Figure 6 is an elevational view of the conventional elevator and the elevator safety 
system of Figure 1, with the components of the elevator safety system in their inoperative 
positions and the limit switches in their positions as determined by the inoperative position 
of the safety column. 

20 Figures 7A and 7B are elevational views illustrating the operative and inoperative 

positions, respectively, of one of the rail safety arms in accordance with the present 
invention. 

Figures 8A and 8B are an elevational view and a magnified view, respectively, of 
the movable stop member, illustrating the safety arm limit switch according to the present 
25 invention. 

Figure 9 is a partial elevational view of the elevator and the elevator safety system 
illustrating the structure of the column enable limit switch. 

Figure 10 shows the arrangement of Figures 10A, 10B, and 10C, which together 
form a relay logic diagram of an elevator control circuit that incorporates the elevator 
30 safety system according to the present invention, wherein: 

Figure 10A shows a first section of the circuit that embodies the control circuit for 
the elevator safety system; 
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Figure 10B is a relay logic diagram of a second section of the control circuit for a 
conventional elevator system operating in conjunction with the elevator safety system of 
Figure 10A; and 

Figure IOC is a relay logic diagram of a third section of the control circuit for a 
5 conventional elevator system operating in conjunction with the elevator safety system of 
Figure 10A. 



DETAILED DES CRIPTION OF THE PREFERRED EMBODIMENTS 

10 In describing preferred embodiments of the present invention illustrated in the 

drawings, specific terminology is employed for the sake of clarity. However, the invention 
is not intended to be limited to the specific terminology so selected, and it is to be 
understood that each specific element includes all technical equivalents which operate in a 
similar manner to accomplish a similar purpose. 

15 Referring now to Figure 1, there is shown a conventional elevator 100 in which an 

elevator safety system 200 in accordance with the present invention is installed. By a 
conventional elevator is meant a hoistway 102 having at its bottom a pit floor 104, a car 
106 positioned above the pit floor 104, and a pair of rails 1 10a and 1 10b for guiding 
vertical travel of the car 106. The car 106 includes a car floor 108, four car side walls 

20 1 12, a door 1 14 in one of side walls 1 12, and a frame affixed to one of the other side walls 
112. Typically, the frame comprises a pair of vertical stiles 116a and 116b having lower 
ends 120a and 120b extending below the car floor 110, which vertical stiles 116a and 116b 
are positioned inwardly of the rails 1 10a and 1 10b. 

The elevator safety system in accordance with the present invention comprises a 

25 combination of mechanical, electro-mechanical, and electrical components which are 
activated by or in response to actions of the elevator maintenance worker or movement of 
the car 106, or which interact with the components of the conventional elevator. As shown 
in Figures 1 - 9, the mechanical and electro-mechanical components which interact with the 
components of the elevator include left and right laterally-spaced, fixed stop members 210a 

30 and 210b fixedly attached to left and right stiles 1 16a and 1 16b above their lower ends 120a 
and 120b, left and right laterally-spaced safety columns 212a and 212b, left and right 
actuators 214a and 214b operatively connected to left and right safety columns 212a and 
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212b f respectively, and left and right laterally-spaced, movable stop members 220a and 
220b movably attached to the left and right rails 110a and 110b, respectively. The safety 
columns 212a and 212b and their associated components are the mirror images of each 
other. 

5 Safety columns 212a and 212b are pivotable between an extended position (see 

Figures 1, 2, 4, and 5) in vertical alignment with left and right fixed stop members 210a 
and 210b, respectively, and a retracted position (see Figures 3 and 6) clear of the car 106, 
the frame, the rails 1 10a and 1 10b, and the left and right fixed stop members 210a and 
210b. Left and right actuators 214a and 214b preferably comprise pistons which pivot left 

10 and right safety columns 212a and 212b between their extended and retracted positions. 
These pistons can be electro-mechanical. Also as shown, safety columns 212a and 212b 
and left and right actuators 214a and 214b can be mounted on left and right plates 222a and 
222b, respectively, which plates are affixed to pit floor 104. 

Figures 1-6 illustrate the locations of left and right column "up" limit switches 

15 CLUL and CLUR and left column "down" limit switches CLDL and DLDR, it being 
understood that right column "up** limit switch CLUR and right column "down* limit 
switch CLDR as shown in Figure 4 are the mirror images of left column "up" limit switch 
CLUL and left column "down" limit switch CLDL relative to their respective safety 
columns 212b and 212a and their respective actuators 214b and 214a. As will be explained 

20 further below, the limit switches CLUL, CLUR, CLDL and CLDR are used to generate 
signals for controlling the operation of the elevator safety system of the present invention. 
When the safety column 212a or 212b is in the fully extended position, it contacts the 
corresponding column "up" limit switch CLUL or CLUR; when in the fully retracted 
position, the safety column 212a or 212b contacts the corresponding column "down" limit 

25 switch CLDL or CLDR. 

Referring again to Figures 1 - 3, left and right movable stop members 220a and 
220b are movable between a first position in vertical alignment with left and right stiles 
1 16a and 1 16b and a second position clear of left and right stiles 1 16a and 1 16b. As shown 
in Figure I, when the left and right movable stop members 220a and 220b arc in the first 

30 position, the left and right stiles 1 16a and 1 16b can rest on the left and right movable stop 
members 220a and 220b when the elevator car 106 is lowered onto them. This allows for 
access underneath the elevator car 106. As shown in Figure 3. when the left and right 
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movabie stop members 220a and 220b are in the second position clear of the left and right 
stiles 116a and 116b, and the safety columns 212a and 212b are in their retracted positions, 
the elevator car 106 can be lowered down to its position for normal operation with the 
lowest level (i.e., the first floor). As shown in Figure 2, when the left and right movable 
5 stop members 220a and 220b are in the second position clear of the left and right stiles 
1 16a and 1 16b, and the safety columns 212a and 212b are in their extended positions, the 
elevator car 106 can be lowered down to its lowest safety limit atop the safety columns 
212a and 212b, creating the minimum under-car clearance (false pit) underneath the 
elevator car 106. 

10 The first or operative position of the movable stop member 220a relative to rail 

1 10a is further illustrated in Figure 7A. and the second or inoperative position of the 
movable stop member 220a relative to rail 110a is further illustrated in Figure 7B, it being 
understood that the first and second positions of the movable stop member 220b relative to 
rail 110b are the mirror images thereof. As shown in Figure 7A, the left stop member 

15 220a can be secured in the first or operative position using lock pin 221a, the right stop 
member 220b similarly being secured in the first or operative position using a lock pin 
221b. As shown in Figures 8A and 8B, when the lock pin 221a is in place in left movable 
stop member 220a, it interconnects with a corresponding rail safety limit switch RSL 
mounted on rail 1 10a. Similarly, when the lock pin 221b is in place in right movable stop 

20 member 220b, it interconnects with a corresponding rail safety limit switch RSR mounted 
on rail 110b. 

A conventional key-operated inspection switch 122 (see Figure 10B) is located 
inside the car 106, typically next to the elevator door 114, while conventional key-operated 
access switches 124a and 124b (see Figure 10B) are located at the topmost and bottommost 

25 landings, respectively. Inspection switch 122 disables the normal elevator control (that is, 
the normal elevator call station devices), so that car 106 will not respond to a call from an 
elevator user while the elevator is being serviced. Access switches 124a or 124b are used 
by the elevator technician to move car 106 up or down a limited distance, typically five (5) 
to six (6) feet. They arc enabled by inspection switch 122 and are key-controlled by 

30 constant pressure; that is, access switches 124a and 124b will not function unless inspection 
switch 122 has first been turned on, and then will not function unless constant pressure is 
exerted. 
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For a car 106 at the lowest landing level, the key-operated inspection switch 122 in 
the operation panel inside the car 106 must be turned on to disable all other devices that 
would cause the car 106 to move away from the lower landing. The keyed inspection 
switch 122 also maintains the power-operated car 106 and landing doors in the open 
5 position and enables the key-operated bottom access switches 124b located, for example, 
on a panel in the car 106 that is accessible only to building security or maintenance 
personnel. Once the technician activates the inspection switch, he can hold the access 
switch in the "up" position to move the car 106 upwards and bring the pit floor 104 into 
view. 

10 In order to prevent left and right actuators 214a and 214b from moving left and 

right safety columns 212a and 212b into their extended positions without sufficient 
clearance under movable stop members 220a and 220b, means such as a column enable 
limit switch CL is mounted on rail 1 10a or 1 10b and operated by a cam fixed to the 
elevator frame for enabling operation of actuators 214a and 214b (see Figure 9, which 

15 illustrates safety column 212a and associated components, it being understood that safety 
column 212b and associated components would appear as the mirror image thereof). The 
limit switch CL is positioned so that it will be activated by the elevator car 106 when car 
106 has traveled high enough so that safety columns 212a and 212b can pivot into their 
extended position without interference from movable stop members 220a and 220b. For 

20 example, as shown in Figure 9. switch cams 117 are fixedly connected to the elevator car 
106 (e.g., along the stiles 116a and 116b) whereby the elevator car 106 traveling up at least 
a minimum distance (e.g., 30 inches) will cause the switch cam 117 to contact and energize 
the limit switch CL. Once actuators 214a and 214b have been activated, they will continue 
to move from their retracted to their extended positions until they reach their extended 

25 positions. While actuators 214a and 214b are extending, car 106 can only travel in the 
"up" direction; it is electrically prevented from traveling in the "down" direction. 

Preferably, the limit switch CL is activated, and activation of safety columns 212a 
and 212b take place, before car 106 has traveled more than the minimum distance 
established by the position of the switch cam 117 (i.e., 30 inches) above the pit floor 104; 

30 and safety columns 212a and 212b are in their extended positions before car 106 has 
traveled a nominal distance (e.g., 36 inches) above the pit floor 104. In other words, 
safety columns 212a and 212b preferably can move from their retracted to their extended 
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positions in the time it takes car 106 to travel upwardly a minimum distance, i.e. not more 
than six (6) inches. 

A pressure-activated switch 230 (see Figure 10A) located, for example, in a safety 
floor mat 232, is positioned on the pit floor 104 and is electrically connected to the 
5 actuators 214a and 214b for setting the safety columns 212a and 212b in place. In 
addition, the pressure-activated switch 230 is connected to the power circuits for the hoist 
motor 242 of the elevator car 106. A minimum weight, for example five pounds, applied 
to the surface of mat 232 activates the actuators 214a and 214b to set the safety columns 
212a and 212b in place, and prevents the hoist motor 242 of the elevator car 106 from 
10 responding to the access switch 124. Removal of the weight from the mat surface re- 
enables control of the hoist motor 242 by the access switch 124. 

One example of a control circuit for controlling the above-described operation is 
illustrated in Figures 10A - 10C. As is known in the an, programmable controllers can be 
used to implement the control system of a conventional elevator system. The control 
15 circuit of the present invention can be incorporated into the control system of a 
conventional elevator system, and can be implemented by using, for example, a 
programmable controller such as an Allen-Bradley Model SLC-500 controller. In the case 
of such an example, the implementation of die control circuit for the present invention is 
represented in a relay logic ladder diagram applicable either to a programmable controller 
20 or to a hard-wired circuit. Figure 10A shows the relay logic connections that make up the 
main elements of the control circuit for the elevator safety system. Figures 10B and 10C 
show the relay logic connections for elements that embody a conventional elevator control 
system and that operate in conjunction with the elevator safety system. 

As is known in the aru relay logic ladder diagrams illustrate the connections 
25 between the relays (via relay contacts and relay coils), limit switches, control switches, and 
other elements that together control the operation of a system. Essentially, each line in the 
ladder diagram illustrates the various contacts and switches that represent the conditions 
that will turn ON or OFF the relay coil in that line. In other words, the energizing or de- 
energizing of the relay coil in each line is based on satisfying the conditions represented by 
30 each contact or switch in the line. The relay coil in each line represents either the 

operation of an actual physical component (i.e.. a motor) or the satisfying of a combination 
of conditions as represented by the contacts and/or switches in the line (i.e., the access 
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space underneath the elevator is unoccupied, allowing the normal operation of the 
elevator). The operations of the relay coils are in turn translated into relay contacts in 
other lines that are needed to satisfy the conditions for the operation of the relay coils in 
those other lines. 

5 As will be explained hereinafter, the relay contacts of some specific relay coils in 

the control circuit of the present invention will be used in several places to determine the 
conditions of numerous other relay coils, i.e. the relay contact for the Safety Mat Relay 
Coil MR is used as one of the conditions for operating other devices including the RESET 
armature of the Safety Mat Circuit Reset latching relay MRR, a Reset Required indicator, 

10 and the Power Enable relay coil PE. For purposes of referencing such different 
applications of the same relay contact, each application will be assigned a separate 
alphanumeric reference symbol (e.g., MR1, MR2, MR3). 

The relays of a programmable controller, through their corresponding relay coils 
and relay contacts, are used to interface the outputs of the programmable controller's 

15 logical operations with high amperage operating devices, such as motor contactors, or 
where relay logic provides a more flexible wiring arrangement than conventional hardwired 
relay logic circuits. 

When incorporating the control circuit of the present invention into the control 
circuit of a conventional elevator system, some relays in the conventional system will be 

20 duplicated in the control circuit of the present invention in order to accommodate the 
interfacing of the control circuit with the conventional system. For example, the "up" 
direction of travel relay coil U and the "down* direction of travel relay coil D, both of 
which will be described below, can be duplicated in the control circuit of the present 
invention. Further, relays for functions that are not available in some conventional elevator 

25 systems will be provided by the control circuit of the present invention, also in order to 
accommodate the interfacing of the present invention with the conventional elevator 
system. An example of a function implemented in relays that would be provided is 
allowing inspection access when the elevator car is located at the lowest landing level. 
As shown in the control circuit of Figure 4, a car clear latching relay CLR 

30 incorporates a SET relay armature S and a RESET relay armature R. The SET relay 
armature S is energized when a column enable limit switch CL and an "up" contactor relay 
contact UC1 are set. The column enable limit switch signals that the elevator car 106 is 
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above the height of the safety columns 212a, 212b. The "up" contactor relay contact UC1 
signals that the "up" contactor relay coil UC is energized. The "up" contactor relay coil 
UC is used to apply voltage to the hoist motor 242 of the elevator car 106 for upward 
movement. If the elevator car 106 is not above the height of the safety columns 212a, 

5 212b, and/or if the "up" contactor relay coil UC was not energized, then the SET relay 
armature S does not energize. 

Similarly, the RESET relay armature R is energized when the column enable limit 
switch CL and a "down 0 contactor relay contact DC1 are set. The "down" contactor relay 
contact DC1 signals that the "down* contactor relay coil DC is energized. The "down" 

10 contactor relay DC is used to apply voltage to the hoist motor 242 of the elevator car 106 
for downward movement. If the elevator car 106 is not above the height of the safety 
columns 212a, 212b, and/or if the "down" contactor relay coil DC is not energized, then 
the RESET relay armature R does not energize. By using the car clear latching relay CLR, 
only the RESET relay armature R or the SET relay armature S is energized at any one 

15 time. The energizing of one relay armature automatically de-energizes the other relay 
armature. 

As indicated above, the safety mat 232 in the pit floor 104 of the hoistway 102 
incorporates a safety mat switch 230. This safety switch 230 has two switch surfaces 
SMS1 , SMS2 connected in series with and one on each side of the safety mat switch relay 
20 coil MR. When no weight is on the safety mat 232, the safety mat relay coil MR is 
energized. When a weight falls on the safety mat 232, the two switch surfaces SMS1, 
SMS2 contact with each other, thereby short-circuiting and de-energizing the safety mat 
relay coil MR. 

The safety column extend relay coil EXT is energized through the latching relay 
25 contact CLR1, the normally-closed safety mat switch relay contact MR5, and the normally- 
closed "down" relay contact Dl, respectively. Alternatively, the safety column extend 
relay coil EXT can be energized through the latching relay contact CLR1 (when the SET 
armature is energized), the bottom access-up relay coil BAU1, bottom access-common 
relay coil BAC1, and the normally-closed "down" direction of travel relay contact Dl. 
30 Further, the safety column extend relay coil EXT can be energized through the energizing 
of the "down" enable relay coil DE through its "down" enable relay contact DEI, as will 
be explained below. Once the safety column extend relay coil EXT is energized, the safety 
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column extend operation relay contact EXT1 activates maintaining the energized state of 
the safety column extend relay coil EXT. 

As described above, each of the safety columns 212a, 212b includes a normally- 
closed column "up" limit switch CLUL or CLUR. These limit switches also control the 

5 energizing of the safety column extend relay coil EXT through their corresponding 

normally-closed left and right column "up" limit switch contacts. While the safety columns 
are retracted, the limit switches CLUL, CLUR are not set. thereby maintaining the contacts 
of the column "up" limit switches CLUL, CLUR in their normally-closed positions. This 
allows the safety column extend relay coil EXT to energize through the operation of other 

10 above-described relay contacts. When the safety columns 212a, 212b reach their fully- 
extended positions, the limit switches CLUL, CLUR are set, which then deactivates their 
contacts, and de-energizes the relay coil EXT leaving the safety columns 212a. 212b in 
their fully-extended positions. 

The safety column retract relay coil RET is energized through bottom access- 

15 common relay contact BAC1, the bottom access-down relay contact BAD1, the latching 
relay device CLR1 (when the SET relay armature S energized), the normally-closed safety 
column extend relay contact EXT2, and the normally-closed "up" relay contact Ul. 

Each of the safety columns 212a, 212b also includes a normally-closed column 
"down" limit switch CLDL or CLDR. The normally-closed column "down" limit switches 

20 CLDL, CLDR control the energizing of the safety column retract relay coil RET. While 
the safety columns are extended, these limit switches are not set, thereby maintaining the 
contacts of the column "down" limit switches CLDL, CLDR in their normally-closed 
positions. When the safety columns reach their fully-retracted positions, the contacts of the 
column "down" limit switches CLDL, CLDR are deactivated, which then de-energizes the 

25 safety column retract operation relay coil RET. 

The "down" enable relay coil DE is initially energized through the safety column 
extend relay contact EXTL Once the "down" enable relay coil DE energizes, the "down" 
enable relay contact DEI also energizes, thereby maintaining the energized state of the 
relay coil DE should the safety column extend operation contact EXT1 de-energize. Like 

30 the safety column retract operation relay coil RET, the setting of the column "down" limit 
switches CLDL, CLDR de-energizes the "down" enable relay coil DE. 

To physically extend or retract the safety columns 212a, 212b. the left and right 
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actuators 214a, 214b connected respectively to the safety columns 212a, 212b are 
controlled by the operation of the safety column extend relay coil EXT and the safety 
column retract relay coil RET. Specifically, when the safety columns 212a, 212b are to be 
extended, the safety column extend relay contacts EXT3 and EXT4 are activated by the 
5 energizing the safety column extend relay coil EXT. When the safety columns 212a, 212b 
are to be retracted, the safety column retract relay contacts RET1 and RET2 are activated 
by energizing the safety column retract relay coil RET. As shown in Figure 4, the safety 
column extend relay contacts EXT3 and EXT4 are connected on poles opposite the safety 
column retract relay contacts RET1 and RET2, respectively. In operation, the safety 
10 column extend operation relay contacts EXT3 and EXT4 activate their corresponding 
actuator motors AML, AMR to extend the safety columns 212a, 212b. Correspondingly, 
the safety retract operation relay contacts RET1 and RET2 energize the corresponding 
actuator motors AML, AMR to retract the safety columns 212a, 212b. 

In the safety mat circuit reset latching relay MRR t the SET relay armature S is 
15 energized by the placement of the movable stop members 220a, 220b. The positions of the 
movable stop members 220a, 220b are indicated by rail safety arm limit switches RSL, 
RSR. As discussed above, Figures 1-3 illustrate the locations of the rail safety arm limit 
switches RSL, RSR relative to the movable stop member 220a or 220b and the rail 110a or 
1 10b. The positions of the movable stop members are indicated by the rail safety arm 
20 limit switch contacts SML2 for the left movable stop member and SMR2 for the right 
movable stop member. In addition to the rail safety arm limit switch contacts SML2, 
SMR2 of the rail safety arm limit switches RSL and RSR, the SET relay armature S for the 
safety mat circuit reset latching relay MRR is energized through a normally closed safety 
mat switch relay contact MR4 of the safety mat switch relay coil MR. 
25 The RESET relay armature R of the safety mat circuit reset latching relay MRR is 

energized when the left and right movable stop members 220a, 220b are not positioned to 
catch the elevator car 106 (i.e., when they are clear of the elevator car 106). For the 
RESET relay armature R, the positions of the movable stop members are indicated by 
normally closed rail safety arm limit switch contacts SML1 for the left movable stop 
30 member 220a and SMR1 for the right movable stop member. 220b In addition, the RESET 
relay armature R is energized through a safety mat switch relay contact MR3 of the safety 
mat switch relay coil MR, and a normally closed the power enable relay contact PE3 of a 
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power enable relay coil PE. Finally, activation of the RESET relay armature R is 
completed through the use of a momentary contact switch/button RESET. Since the safety 
mat circuit reset latching relay MRR is a latching relay, energizing the RESET relay 
armature R automatically de-energizes the SET relay armature S. 

5 The power enable relay coil PE controls the application of AC voltage to the 

circuits of the elevator system. It is energized through a safety mat switch relay contact 
MR2 and a normally closed safety mat circuit reset latching relay contact MRR2. In other 
words, the power enable relay coil PE is energized as long as no weight is placed on the 
safety mat 230 (i.e., the safety mat relay coil is energized), and the left and right movable 

10 stop members 220a, 220b are not positioned to catch the elevator car 106 (i.e., the safety 
mat circuit reset latching relay MRR is reset ). 

A Reset Required indicator (e.g., an indicator light) is energized through the 
normally closed left rail safety arm limit switch contact SML1, the normally closed right 
movable stop member limit switch contact SMR1, the safety mat switch relay contact 

15 MR3, and the safety mat circuit reset latching relay contact MRR3. 

An audible warning alarm (e.g., a warning belK horn, or beeper) is used to indicate 
that the movable stop members 220a, 220b should be placed into position and that lock pins 
221a, 221b should respectively be installed to lock the movable stop members 220a, 220b 
in place. The warning signal is energized through the safety mat switch relay contact 

20 MR1 and the safety mat circuit reset latching relay contact MRRI. 

Power for the motive source for moving the safety columns 212a, 212b in and out 
of position (e.g., an electric motor, an electric solenoid, or an electromechanically- 
controlled pneumatic cylinder) is controlled by the operation of the "up" contactor relay 
coil UC, the "down" contactor relay coil DC, and the potential contactor relay coil PC. 

25 Specifically, the "up" contactor relay coil UC applies voltage to the motive source for 
upward travel of the elevator cars. The "down" contactor relay coil DC applies voltage to 
the motive source for downward travel of the elevator cars. The potential contactor relay 
coil PC applies voltage to the "up* and "down" contactors UC, DC. 

As shown in Figure 10A, the relay circuit structure for energizing the "up" 

30 contactor relay coil UC, the "down" contactor relay coil, and the potential contact relay 
coil PC is consistent with elevator control circuits as known in the art. However, in 
addition to the normally-closed overload relay contact OL1 and the reverse phase relay 
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contact RPR1 controlling the energizing of all three relay coils UC, PC and DC, a power 
enable relay contact PE1 is included. As a result, the three relay coils UC, PC and DC can 
only be energized when the power enable relay coil PE is energized. As noted above, the 
power enable relay coil PE is energized as long as no weight is placed on the safety mat 

5 230 (i.e., the safety mat relay coil is energized), and the left and right movable stop 
members 220a, 220b are not positioned to catch the elevator car 106 (i.e., the safety mat 
circuit reset latching relay MRR is reset). Further, in the circuit structure for energizing 
the "down" contactor relay coil DC, a normally closed "down" enable relay contact DE2 is 
included to prevent the downward travel of the elevator. Specifically, when the safety 

10 columns 214a, 214b are fully retracted and the normally closed safety column limit 
switches CLDL, CLDR are open, the "down" enable relay coil DE is de-energized as 
indicated by the de-energizing of the safety position relay coil DE, the normally closed 
safety column position relay contact DE2 maintains the "down" contactor relay coil DC 
useable. 

15 As shown in Figure 10B, the keyed inspection switch 122 (KIS) is a normally- 

closed switch that controls a primary inspection relay coil IN. The access switch 124 is 
connected to be active when the keyed inspection switch 122 (KIS) is opened. The opening 
of the keyed inspection switch 122 (KIS) de-energizes the primary inspection relay coil IN 
thereby allowing the access switch 124 to selectively energize either the bottom access, 

20 "up" relay coil BAU or the bottom access, "down" relay coil BAD, while activating the 
bottom access, common relay coil BAC. Selectively energizing the bottom access, "up" 
relay coil BAU or the bottom access, "down" relay coil BAD will in turn control the up or 
down movement of the elevator car 106 in the process of accessing the pit floor 104 in the 
hoistway 102. 

25 In Figure 10B, the "down" relay coil D and the "up" direction of travel relay coil U 

provide travel direction control and interfacing of circuits related to controlling movement 
of the elevator car 106 in the respective directions. The potential relay coil P and its 
corresponding relay contacts potential contactor control. The devices and operations which 
together control the energizing/de-energizing of the "down" relay coil D, the "up" relay 

30 coil U, and the potential relay coil P are consistent with those devices and operations which 
are incorporated in conventional elevator systems using programmable controllers. Such 
devices include, as shown in Figure 10B, the door interlock relay coil DIL and its 
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corresponding contacts for monitoring the opening and closing of the elevator doors and the 
elevator car gate. A secondary inspection relay coil INT and its. corresponding contacts 
interface the top and bottom floor access controls with the control elements of the "up" 
relay coil U, the "down" relay coil D, and the potential relay coil P. 

5 The "down" relay coil D and the "up" relay coil U are selectively energized or de- 

energized as a result of the operation of the access switches 124a or 124b. Specifically, the 
access switch 124a, as discussed above, controls the operation of the top access, "up" relay 
coil TAU or the top access, "down" relay coil TAD, along with the top access, common 
relay coil TAC. As the top access relay coils are selectively operated in order to move the 

10 elevator car up or down with the access switch 124a, corresponding top access relay 
contacts are activated or deactivated. Further, the access switch 124b controls the 
operation of the bottom access, "up" relay coil BAU or the bottom access, "down" relay 
coil BAD, along with the bottom access, common relay coil BAC. As the top and bottom 
access relay coils are selectively operated in order to move the elevator car up or down 

15 with the access switches 124a or 124b, corresponding top or bottom access relay contacts 
are activated or deactivated. Activation of these access relay contacts as illustrated in 
Figure 10B, when in combination with other control elements as illustrated, will then 
selectively energize or de-energize the "down" relay coil D and the "up" relay coil U. The 
master control relay MCR controls the application of power to the programmable 

20 controller. 

As shown in Figure IOC, the level "up" relay coil LU and the level "down" relay 
coil LD, and their corresponding relay contacts control car re-leveling and. to a limited 
extent, deceleration in their corresponding directions. 

Other elements shown in the relay logic ladder diagrams of Figures 1 OA- IOC which 
25 have not been described in detail comprise devices and operations that are found in 

conventional elevator systems and therefore would be known to one of ordinary skill in the 
art. 

As an example of the operation of the present invention, the following discussion 
sets out the operation of the elevator control circuit shown in Figures 10A-10C. For 
30 illustrative purposes only. Figures 10A-10C incorporate circuitry for operating an elevator 
control system in a building with three floors or landings. However, the present invention 
in all its embodiments and equivalents can be applied to elevator systems in buildings with 
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more, or even fewer (e.g., two) floors or landings. 

As one of ordinary skill in the art would understand, when AC power is applied to 
the entire elevator system, the elevator becomes available for normal service. As part of 
the elevator system's normal operation, some relays will be energized, and some switches 
5 will be in an operating state depending on the location of the elevator car 106. Certain 
relays will be energized no matter at which floor the elevator car 106 is parked. For 
purposes of this example, the sequence of operation will begin with the assumption that the 
elevator car 106 will begin at the third floor and travel to the first floor (lowest landing). 
Further, all safety devices are initially in the non-operated condition. Further, the elevator 
10 car gate and all landing doors are assumed to be closed, thereby closing all of the normally 
open gate and door contacts of their respective switches. 

Depending on the start-up situation, programmable controller inputs 008, 010 and 
016 as shown in Figures 10B and 10C will be energized. The following relay coils as 
previously described above will be energized: RPR, MR, PE, MCR. DIL, IN, and INT. 
15 When the reverse phase relay coil RPR is energized, its relay contact RPR1 is closed. The 
normally-closed relay contact MR1 is open, while the safety mat relay coil MR is 
energized. The normally-closed safety mat circuit latching relay contact MRR2 closes 
when the RESET armature R of the safety mat circuit latching relay MRR energizes. The 
relay contacts MR2 and MRR2 allow power enable relay coil PE to energize. The relay 
20 contact MR3 will close, while the normally-closed relay contact MR4 will open. The 
normally-closed relay contacts MRR1 and MRR2 will be closed, while the relay contact 
MRR3 is open. The normally-closed relay contact PE3 is open. The normally-closed relay 
contact MRS will be open. The power enable relay contacts PE1, PE2 and PE4 are closed. 
Latching relay contact CLR1 will be closed while the elevator car 106 is located above the 
25 column enable limit switch CL. When the elevator car 106 travels to the second floor or 
third floor landing from the first floor landing, the "up" contactor relay contact UC1 
closes. As the elevator car 106 goes past the column enable limit switch CL, the SET 
armature of the car clear latching relay CLR is energized, thus closing relay contact CLR1. 
At this point, the safety columns 212a and 212b can be electrically operated, whereby the 
30 actuators will extend to reposition the safety columns 212a and 212b into their vertical 
positions beneath the elevator frame. 

While all major safety switches remain closed, the master control relay MCR is 
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energized. Relay contacts MCRl and MCR2 are closed, thereby applying AC power to the 
programmable controller of the elevator system. As long as the PE2 and PE4 relay 
contacts remain closed, and the In Car Stop Switch, the car gate, and all doors remain 
closed, the door interlock relay coil DIL is energized and its relay contact DILI is closed. 
5 While the Controller Inspect Switch 234 and the Keyed Inspect Switch 122 in the 

elevator remain closed, primary inspection control relay coil IN will be energized. Its 
relay contacts IN3 will be closed, while the normally-closed relay contact IN2 will be 
open. INT will be energized, while the Car Top Inspect Switch 236 is closed. The relay 
contact INT2 secondary inspection control relay coil will be closed. The Hall Button Cut- 

10 Out Switch 238 is closed. The Leveling Cut-Out Switch 240 is also closed. Normally- 
closed relay contacts INT1 and INI will both be open. The 3rd Floor Zone Switch 23 will 
be closed by the switch cams 1 17 attached to the elevator frame. The Door Zone Switch 
DZ will also be closed, but by a different cam or vane located at the landing. Each landing 
is equipped with an identical switch operator because the Door Zone Switch DZ is attached 

15 to the elevator. The Door Zone Switch DZ is required for power operated doors but still 
serves a purpose when manually operated gates are used. 

Momentarily pressing the Hall Call Button, an input signal is sent to the 
programmable controller at Input 004. After the signal is processed, the programmable 
controller will produce a signal at Output 003. This signal is routed through the normally 

20 closed contact of the Normal "Down" Limit Switch. The signal then returns to the elevator 
controller where it passes through a normally-closed "up" relay contact U4. From this 
point the signal becomes an input to the programmable controller at Input 007. At the 
same time, the "down" relay coil D is energized. After the "down" relay coil D has 
energized, its relay contact D4 closes, allowing the same output signal to pass through the 

25 closed relay contact DILI of the energized door interlock limit relay coil DIL to energize 
the potential relay coil P. At the same time, the output signal becomes an input to the 
programmable controller at Input 006. The normally-closed "down" relay contact D3 is 
open, ensuring that the "up" relay coil U cannot energize. 

The energizing of the "down" relay coil D also closes a relay contact D2. Since the 

30 relay contacts OL1, RPR1, and PE1 are all closed when relay D2 closes, voltage is passed 
through normally-closed relays contacts UC4 and DE2 to energize the "down" contactor 
relay coil DC. Relay contact DC4 opens to prevent any accidental energizing of the "up" 
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contactor relay coil UC. Relay contact DCS will close, and with the relay contact PI 
already closed, the potential contactor relay coil PC will also energize. With the contactors 
DC and PC both energized, the hoist motor 242 will receive its operating voltage, causing 
motor rotation that will lower the elevator car 106 to the lowest landing until the Normal 

5 "Down" Limit Switch is operated by a cam (not shown) fixed to the elevator frame, which 
will open the Normal "Down" Limit Switch, thus removing the programmable controller 
output signal from the "down" contractor relay coil D and allowing it to de-energize. 

As the elevator travels, the control circuit elements associated with the safety 
columns 214a, 214b are also changing state. The relay contact Dl opens to prevent the 

10 operation of the relay coil EXT. This is to ensure that the safety columns 214a, 214b do 
not extend while the elevator is moving into the pit area. Most importantly, the car clear 
relay coil CLR is operating. As the elevator moves down into the pit, the column enable 
limit switch CL is operated by the switch cam 1 17 on the elevator frame, "down" 
contactor relay contact DC1 is closed, and as the column enable limit switch is operated, 

15 the RESET armature R of the relay contact CLR1, CLR will briefly receive an operating 
voltage, thus opening relay contact CLR1. While the relay contact CLR1 is open, the 
safety column operating relays cannot energize. This prevents mechanical interference or 
damage to both the elevator car 106 and the safety columns 214a, 214b. 

When the elevator is at the first floor landing, the First Floor Zone Switch Zl will 

20 be operated by a cam (not shown) on the elevator frame, and thereby closed. This provides 
a signal to the programmable controller Input Oil. The Door Zone Switch will also be 
operated by the cam or vane located at the landing, sending signal to input 016. 

While at the first floor landing, inspection service can be performed by qualified 
technicians. The procedure involved and the sequence of events are as follows: 

25 Freight elevators are equipped with manually operated doors and gates, while most 

passenger elevator systems have power-operated doors and gates. In either case, with the 
doors and the car gate at the first floor landing opened, the Hall Button Cut-Out Switch 238 
in the controller can be opened to prevent hall calls from the other landings. The Leveling 
Cut-Out Switch 240 is also opened to prevent unwanted car leveling or automatic door 

30 operation when the inspection sequence is completed. The controller inspect switch 234 is 
also opened for similar reasons. When the Controller Inspect Switch 234 or the Keyed 
Inspect Switch 122 is operated, the primary inspection relay coil IN is disabled. Relay 
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contact IN3 is thus open, and relay contact IN2 is closed. The closing of the relay contact 
IN2 permits the operation of the Bottom and Top floor Access Switches 124a, 124b. At 
the top floor, the only access switch that would be functional is the access "up* side of the 
switch 124a, because the elevator car 106 must be physically located at that landing to 
5 operate the access zone limit switch AZT in order to operate the Top Access "down" relay 
coil TAD. With the elevator car 106 located at the first floor landing, the access zone limit 
switch AZB is operated and its contact is closed, allowing the use of the Bottom Access 
"up" function of the Bottom Access Switch 124b. 

Operation of the Bottom Access switch 124b in the "up" position energizes bottom 

10 access relay coils BAU and BAC. The In Car Stop Switch, the Intermediate Door Contact, 
and the Upper Door Contact are all closed. At this time, the Lower Door Contact and Car 
Gate contacts are open. To operate the elevator in the "up" direction with the door and 
gate contacts open, AC power is routed through the In Car Stop Switch and Intermediate 
Door Contact. From there, AC power goes through the relay contacts BAC2 and BAU2 to 

15 the Upper Door Contact. Primary Inspection Relay Coil INT is still energized, which 
keeps relay contact INT1 open. From relay contact INT1, power re-routes through relay 
contact BAU3 over to the Normal "up" Limit Switch, where the circuit functions to operate 
the "up" contactor relay coil U and the other related relays, as was described for the 
"down" call of the elevator car 106. When the elevator travels up past the point where the 

20 Bottom Access Zone Switch AZB is operated by a cam (not shown) mounted on the 

elevator frame, the bottom access "up" relay coil BAU will de-energize and upward travel 
will cease. 

During use of the bottom access switches 124b in the "up" position, other events are 
taking place in the controller and the elevator pit area. The relay contact Ul is open, thus 

25 preventing the safety column retract relay coil RET from energizing. The "up" contactor 
relay contact UC1 is closed so that when the elevator car 106 is high enough to operate the 
Column Enable Limit Switch CL, the SET armature of the car clear latching relay CLR is 
energized. Latching relay contact CLR1 is then closed, and will remain closed until the 
elevator car 106 is returned to floor level at the first floor landing. Other events which 

30 take place during the Access "up" operation are as follows: 

The column "up" limit switches CLUL, CLUR are initially closed, which allows the 
safety column extend relay coil EXT to energize. AC power will pass through the closed 
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limit switch and the closed relay contact Dl to the safety column extend relay coil EXT to 
the closed relay contact BAU1 . From there, the circuit to energize safety column extend 
relay coil EXT passes through the energized closed relay contact BAC1 and the relay 
contact CLRl. Once the relay coil EXT is energized, it will be locked in by its own relay 
5 contact EXT1 . It will remain energized until both of the Column "up" Limit Switches 
CLUL, CLUR are opened by the full travel of the safety columns 212a, 212b. Relay 
contacts EXT3, EXT4 provide the operating voltage for the two actuators 214a, 214b 
causing them to extend, which moves the safety columns 212a, 212b upright. As the safety 
columns 212a, 212b start to move upright, the column "down" limit switches CLDL, 
10 CLDR are allowed to return to the non-operated position, which in turn allows AC power 
to pass through their corresponding contacts. "Down" enable relay coil DE is energized as 
a result of the closed relay contact EXT1 . The relay coil DE also locks itself in the 
energized state by its own relay contact DEI . It will remain energized until both Column 
"down" Limit Switches CLDL, CLDR are operated by the safety columns 212a, 212b 
15 returning to their stored positions. With relay coil DE energized, downward travel by the 
elevator car 106 is prohibited by the now-open relay coil DE2. 

At this point, the elevator car 106 is parked about five feet above the first floor 
landing door sill and about six (6) feet above the pit floor. There is now sufficient room 
for the technician to enter the pit area for his inspection or maintenance service. The 
20 elevator still has AC power available at this time. If it was evident that the pit area was in 
proper operating condition, the elevator could be returned to the first floor landing with the 
Bottom Access Switch 124b. If the technician does enter the pit area, AC power will be 
removed from the majority of the controller circuits. 

The following circuits or functions will remain operational for safety reasons. 
25 Master Control Relay MCR will remain energized along with the programmable controller 
AC supply through the relay contacts MCR1, MCR2. The Fire Recall Switch also remains 
functional. Further, the elevator safety system of the present invention remains fully 
functional. 

Upon entering the pit, the technician's first step will land on the mat switch 230. 
30 When it does so, the mat relay coil MR will drop out or de-energize. During normal use, 
the mat switch operates as an open type of contact. When the contact closes, a short circuit 
is created which removes the AC supply from the mat relay coil MR. The supply 
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transformer 242 and fuse 214 are protected from burn-out by the use of a resistor 246 in 
the circuit. The resistor 246 becomes the only electrical load rather than the mat relay coil 
MR with the resistor 246. 

When the mat relay coil MR relay drops out, the normally-closed relay contact 

5 MRS will return to the closed condition. If the elevator had been at an upper landing (e.g., 
the third floor) and not in the Access mode of operation, the closing of MRS would have 
caused the automatic energizing of the safety column extend relay coil EXT and the 
operation of the left and right actuators 214a, 214b. Since this is an Access type of 
operation, the actuators 214a, 214b are already in the extended position. Relay contact 

10 MR1 closes, while relay contact MRR1 is already closed. With these two contacts closed, 
the warning bell 248 will ring within the pit area. The bell is loud enough to be irritating 
to those in the pit such that, in order to silence the warning bell 248, those in the pit must 
get off the mat switch 230 or place the movable stop members 220a, 220b in position, 
whereby the frame of the elevator car 106 would come to rest on them if it were to be 

15 lowered. By placing the movable stop members 220a, 220b in position, the two Rail 
Safety Arm Limit Switches SML, SMR will be operated and the switch contacts SML2, 
SMR2 will close. Since the relay contact MR2 is closed, the SET armature of the mat 
circuit reset latching relay MRR will be energized. With the mat circuit reset latching 
relay MRR energized and in the SET state, relay contact MRR1 will open, and the warning 

20 bell 248 will cease to operate. Relay contact MR2 will be in the open state, and hence the 
power enable relay coil PE will be de-energized. Relay contact PE3 will close in 
preparation for the system reset operation to be performed later. Relay contacts PE1 , PE2 
and PE4 will open. These contacts serve to remove all AC power from the operational 
devices of the basic elevator system, with the exception of the programmable controller, 

25 The Master Control Relay MCR and the Fire Recall Switch. Relay contact MRR3 is also 
closed at this time; this set of contacts will be a part of the Reset Required Indicator circuit. 

From this point on, the technician can perform the required service on the elevator 
car 106 that is electrically disabled. Mechanically, he is protected by two different sets of 
safety devices, movable stop members 220a, 220b and safety columns 212a, 212b. The 

30 movable stop members 220a, 220b prevent elevator car travel below the point where stop 
members 220a, 220b are located (typically five to six feet above the pit floor), while the 
electrically- positioned safety columns 212a, 212b provide the mechanical obstruction to 
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elevator car descent which creates the ANSI Code Minimum Depth of Pit (24 inches) by 
raising the point of impact of the elevator frame with a pit floor device. 

After performing any pit services, the system will be returned to an operational 
status. In order to reset the system, the movable stop members 220a, 220b must be first 
5 returned to their stored positions. When this has been done their switch contacts SML2, 
SMR2 will open, and the switch contacts SML1, SMR1 will close. Since relay MRR is of 
the latching type, the warning bell 248 will not activate at this time. Once the technician 
exits the pit, the mat switch surfaces SMS1, SMS2 will separate, and the mat relay coil 
MR will energize. 

10 Relay contacts MR1, MR4 will open, disabling circuits for the warning bell 248 and 

the SET armature S of the latching relay MRR relay. Relay contacts MRS will open, and 
relay contacts MR2, MR3 will close. The Reset Required Indicator 250 will illuminate in 
the elevator controller enclosure (not shown). At this point, operation of the Reset button 
252 will energize the RESET armature R of the latching relay MRR. Relay contacts 

15 MRR1, MRR2 will close, and the relay contact MRR3 will open. The power enable relay 
coil PE will energize, and the relay contact PE3 will open. Relay contacts PE1, PE2, PE4 
will all close. The elevator controller is at that point ready for the Access "down" 
operation. If entrance into the pit area were to take place again, the elevator safety circuits 
would function again as previously explained. 

20 To fully recover from the above Access Inspection procedure, the Bottom Access 

Switch 124b at the first floor landing must be used. By holding the Bottom Access Switch 
124b in the "down" position, bottom access relay coils BAC and BAD will be energized. 
As in the Access "up" operation, the open first floor landing door and the open car gate 
circuit will be bypassed by the relay coils BAC and BAD, and the relay coils D, DIL, and 

25 P will be energized. Elevator travel in the ."down" direction is prevented by the open relay 
contact DE2. Relay coil DE was initially energized at the beginning of the "up" Access 
position of the inspection procedures. 

By holding the Bottom Access Switch 124b in the "down" position when the relay 
contacts BAD1 and BAC1 close, relay contact CLR1 of latching relay CLR is still closed, 

30 and this circuit will cause the safety column retract relay coil RET to energize. The relay 
coil EXT cannot accidentally energize because of the open relay contact Dl . Relay 
contacts RET1, RET2 of relay coil RET will close, allowing AC power to be sent to the 
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left and right actuators 214a, 214b so that the safety columns 212a, 212b will be moved to 
their retracted positions. As the safety columns 212a, 212b move, the column "up." limit 
switches CLUL, CLUR will close. When the safety columns 212a, 212b are fully 
retracted, the column "down" limit switches CLDL, CLDR will open. When both sets of 
5 column "down" limit switches CLDL, CLDR have opened, the relay coils RET and DE 
will be energized. 

The relay contact DE2 closes and the "down" contactor relay coil DC for downward 
travel will energize. The elevator car 106 will then move down to the Normal "Down" 
Limit Switch. Downward travel is still dependent on the technician holding the Bottom 

10 Access Switch 124b to the "down" position. While the elevator is moving down, the 

Column Enable Limit Switch CL will be operated by the movement of the elevator car 106. 
While the "down" contactor relay contact DO remains closed, the RESET armature R of 
the latching relay CLR will be momentarily energized. The relay contact CLR1 will open, 
disabling relay coils EXT, RET and DE. After elevator car travel is disabled by the 

15 opening of the Normal "Down" Limit Switch, the technicians will be able to return all of 
the inspection switches to their normal configuration for normal elevator operation. 

Modifications and variations of the above-described embodiments of the present 
invention are possible, as appreciated by those skilled in the art in light of the above 
teachings. It is therefore to be understood that, within the scope of the appended claims 

20 and their equivalents, the invention may be practiced otherwise than as specifically 
described. 
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w H AT IS CI AIMED IS: 

1 . A safety system for an elevator including a car positioned above a pit area 
and having a car floor and at least one car side wall, a frame affixed to the side wall and 
having a lower end extending below the car floor, a pair of rails positioned outwardly of 
the frame, and a motor providing upward and downward movement of the car, said safety 
system comprising: 

left and right laterally-spaced, fixed stop members fixedly attached to the 
frame above said lower end; 

left and right laterally-spaced safety columns, said safety columns being 
pivotable between an extended position in vertical alignment with said left and right stop 
members, respectively, and a retracted position clear of the car, the frame, the rails, and 
said left and right stop members; 

at least one actuator operatively connected to said left and right safety 
columns for pivoting said left and right safety columns between said extended and retracted 
positions; and 

control means for controlling operation of said at least one actuator. 

2. The elevator safety system of claim 1, wherein said control means includes 
means for manually controlling said motor of said elevator; 

a switch for switching control of upward and downward movement of the car from 
automatic to manual operation, and enabling operation of said manual control means; and 

first detection means for detecting the position of the car and enabling operation of 
said at least one actuator when the car reaches a predetermined position. 

3. The elevator safety system of claim 2, wherein said first detection means 
includes a limit switch fixedly positioned to make contact with the car when the car reaches 
said predetermined position. 
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4. The elevator safety system of claim 1, wherein said control means includes 
second detection means for detecting the positions of said left and right laterally-spaced 
safety columns, and means for selectively disabling operation of said at least one actuator 
relative to said left and right laterally-spaced safety columns being in one of said retracted 
and extended positions. 

5. The elevator safety system of claim 4, wherein second detection means 
includes limit switches fixedly positioned in the pit area for detecting at least one of said 
retracted and extended positions of said left and right laterally-spaced safety columns. 

6. The elevator safety system of claim 1, further comprising left and right 
laterally-spaced, movable stop members movably attached to the left and right rails, 
respectively, said movable stop members being movable between a first position in vertical 
alignment with the frame and a second position clear of the frame. 

7. The elevator safety system of claim 6, wherein said control means includes 
third detection means for detecting the positions of said movable stop members, and 
warning means for signaling the positions of said movable stop members. 

8. The elevator safety system of claim 7, wherein said third detection means 
includes limit switches fixedly positioned in the pit area for detecting at least one of said 
first and second positions, and said warning means includes an audible warning alarm 
actuable when said limit switches detect said movable stop members in said second 
position. 

9. The elevator safety system of claim 1, wherein said control means includes a 
fourth detection means for detecting the presence of a person on a floor of the pit area, said 
fourth detection means including means for disabling said motor when the presence of a 
person on said floor of the pit area is detected. 
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10. The elevator safety system of claim 9, wherein said fourth detection means 
comprises a pressure-sensitive mat covering the .floor of the pit area under the car. 

11. The elevator safety system of claim 1, wherein the frame comprises left and 
right stiles, and wherein said left and right fixed stop members are respectively fixed to the 
left and right stiles. 

12. The elevator safety system of claim U wherein said at least one actuator 
comprises left and right pistons respectively connected to said left and right safety columns. 

13. A safety system for an elevator positioned above a pit area, the elevator 
including a car having a car floor and at least one car side wall, left and right laterally- 
spaced vertical stiles affixed to the side wall and having lower ends extending below the car 
floor, left and right vertical rails positioned outwardly of the left and right stiles, 
respectively, and a hoist motor for providing upward and downward movement of the car, 
said safety system comprising: 

left and right laterally-spaced, fixed stop members fixedly attached to the left 
and right stiles, respectively, above the lower ends of the stiles; 

left and right laterally-spaced safety columns, said safety columns being 
pivotable between an extended position in vertical alignment with said left and right stop 
members, respectively, and a retracted position clear of the car, the frame, the rails, and 
said left and right stop members; 

left and right actuators operatively connected to said left and right safety 
columns for pivoting said left and right safety columns, respectively, between said 
extended and retracted positions; and 

a control circuit for controlling operation of said left and right actuators. 
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14. The elevator safety system of claim 13, wherein said control circuit includes 
a first user-operated switch for manually controlling the hoist motor of the car; 

a second user-operated switch for switching control of the hoist motor from 
automatic to manual operation, and enabling operation of said manual control switch; and 

a first detection switch circuit for signaling when the car reaches a predetermined 
position, wherein operation of said actuator is enabled by said first detection switch circuit. 

15. The elevator safety system of claim 14, wherein said first detection switch 
circuit includes a limit switch fixedly positioned to contact with the car when the car 
reaches said predetermined position. 

16. The elevator safety system of claim 14, wherein said control circuit includes 
a second detection switch circuit for detecting the positions of said left and right safety 
columns, and means for selectively disabling operation of said left and right actuators 
relative to the detected position of said left and right safety columns. 

17. The elevator safety system of claim 16. wherein second detection switch 
circuit includes left and right limit switches fixedly positioned in the pit area in proximity 
to each of said left and right laterally-spaced safety columns, said first and second limit 
switches being positioned to detect said retracted and extended positions, respectively, of a 
corresponding one of said left and right safety columns. 

18. The elevator safety system of claim 16, further comprising left and right 
laterally-spaced, movable stop members movably attached to the left and right rails, 
respectively, said movable stop members being movable between a first position in vertical 
alignment with the frame and a second position clear of the frame. 

19. The elevator safety system of claim 18, wherein said control circuit includes 
a third detection switch circuit for detecting the positions of said movable stop members, 
and an audible warning alarm for signaling when said movable stop members are in the 
second position clear of the frame. 
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20. The elevator safety system of claim 19, wherein said third detection switch 
circuit includes first and second limit switches fixedly positioned in the pit area in 
proximity to each of said left and right movable stop members, respectively, said first and 
second limit switches being positioned to detect said first and second positions, 
respectively, of a corresponding one of said left and right movable stop members. 

21. The elevator safety system of claim 19, wherein said control circuit includes 
a fourth detection switch circuit for detecting the presence of a person on a floor of the pit 
area, said fourth detection switch circuit including means for disabling said motor when the 
presence of a person on said floor of the pit area is detected. 

22. The elevator safety system of claim 21, wherein said fourth detection means 
comprises a pressure-sensitive mat covering the floor of the pit area under the car. 

23. The elevator safety system of claim 13, wherein the frame comprises left and 
right stiles, and wherein said left and right fixed stop members are respectively fixed to the 
left and right stiles. 

24. The elevator safety system of claim 13, wherein said left and right actuators 
comprises left and right pistons respectively connected to said left and right safety columns. 
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25. A method for operating a safety system of an elevator to create an access pit 
between the elevator and an elevator shaft pit floor, the system including an elevator car 
having left and right laterally-spaced vertical stiles affixed thereto, left and right rails 
positioned outwardly of the left and right stiles, respectively, left and right laterally-spaced, 
fixed stop members fixedly attached to each of the left and right stiles, left and right laterally- 
spaced, movable stop members movably attached to each of the left and right rails, left and 
right laterally-spaced safety columns pivotable between an extended vertical position and a 
retracted position, a motor for providing upward and downward movement of the car, and a 
control circuit swhchablc between automatic and manual operation for controlling the motor 
and the pivoting of the safety columns, said method comprising the steps of: 

switching the control circuit to manual operation of the car to enable manual 

control of the motor, 

positioning the car a predetermined distance above the pit floor, and 
automatically extending the left and right safety columns into the extended 

vertical position in vertical alignment with the fixed stop members in response to the 

positioning of the car. 

26. The method of claim 25, further comprising the step of detecting the presence 
of the left and right safety columns in the retracted position, prior to said step of extending the 
left and right safety columns; and 

wherein said step of extending the left and right safety columns into the 
extended vertical position takes place in response to said detecting of the safety columns in the 
retracted position and to said positioning of the car. 
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27. The method of claim 26, farther comprising the steps of: 
detecting the presence of a weight on the pit floor, 

detecting the position of the left and right movable stop members; 

generating a warning alarm in response to said detecting of the presence of a 
weight in the pit floor, and to the left and right movable stop members being detected in a 
position clear of the left and right stiles, respectively, and 

disabling the motor through the control circuit to prevent at least downward 
movement of the car. 

28. The method of claim 27, further comprising the steps of: 

moving the left and right movable stop members into vertical alignment with 

the left and right stiles; and 

stopping said generating of the warning alarm in response to said moving of the 
movable stop members into vertical alignment. 

29. The method of claim 25, further comprising the steps of: 

detecting the presence of the left and right safety columns in the extended 

vertical position; 

detecting the absence of a weight on the pit floor; 

moving the left and right movable stop members into the position clear of the 
left and right stiles, respectively; 

retracting the left and right safety columns into the retracted position in 
response to the detection of the safety columns in the extended vertical position and to the 
absence of a weight on the pit floor; 

enabling the motor through the control circuit to allow downward movement 
of the car in response to the absence of a weight on the pit floor and to the left and right 
movable stop members being moved into the position clear of the left and right stiles; and 

switching the control circuit to automatic operation to enable normal operation 
of the elevator system. 
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